CVE-2023-28503criticalCWE-798

CVE-2023-28503: critical vulnerability in Rocket Software UniData

Authentication bypass in UniRPC's udadmin service

Published · Updated

Follow this CVE+ Monitor UniData+ Monitor UniVerse

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

75Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 9.8epss 61%
from disclosure to weapon1 day
Published on NVDMar 29
metasploit+1d
In short

A hardcoded username and password in UniData and UniVerse databases allow attackers to bypass login security and run commands with root privileges, completely compromising the system.

Technical detail

CWE-798 hardcoded credentials vulnerability in the udadmin service permits unauthenticated remote attackers to bypass authentication using a predetermined username-password pair and execute arbitrary OS commands with root-level privileges. Affected versions are UniData <8.2.4 build 3003 and UniVerse <11.3.5 build 1001 or <12.2.1 build 2002.

Summary generated and translated by AI from the official description.
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to bypass authentication checks and execute OS commands as the root user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Rocket Software · UniDataRocket Software · UniVerse
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Rocket Software UniData

In the same product, most dangerous first.

CVE-2023-28502CRITICALStack buffer overflow in UniRPC's udadmin_server serviceEPSS 59.6%CVE-2023-28504CRITICALStack buffer overflow in UniRPC library functionEPSS 1.4%CVE-2023-28501CRITICALHeap buffer overflow in unirpcdEPSS 1.4%CVE-2023-28507CRITICALMemory exhaustion in LZ4 decompression in UniRPC daemonEPSS 0.9%CVE-2023-28506HIGHStack buffer overflow in UniRPC serviceEPSS 0.9%CVE-2023-28508—Heap corruption in UniRPC serviceEPSS 0.9%